Privacy Notice
Version 2026-12 · Last updated: 7 November 2026
1. Who we are
Navloon (navloon.com) helps small and medium-sized businesses obtain international freight quotations. The data controller is Navloon. Contact: privacy@navloon.com.
2. What data we collect
- Account data: your email address and password (the password is stored securely in encrypted form), and optionally your name, company name and phone number.
- Shipment requests: the description you write. If you include personal data or contact details in it, we store them too. Please include only what is needed for a quotation.
- Consent record: the date you accepted this notice and the notice version.
- Technical data: a scrambled (hashed) form of your IP address, used only to prevent spam, and your language preference stored in your browser.
- Correspondence: emails you exchange with us.
3. Why we use your data and on what basis
| Purpose | Legal basis |
|---|---|
| Create and manage your account, save your request | Needed to provide the service you ask for |
| Share your shipment description with freight forwarders to obtain quotations | Your consent |
| Contact you about your request and quotations | Needed to provide the service / our legitimate interest |
| Security and spam prevention | Our legitimate interest |
| Meeting legal obligations | Legal obligation |
4. Who we share your data with
- Freight forwarders: we send them only your shipment description. We do not send your name, company or contact details unless you write them in the description. You see their quotations as "Forwarder A", "Forwarder B" and so on.
- Service providers acting on our behalf: Supabase (database, login, file storage; server region: eu-north-1), Lovable (website hosting), Google (email), Cloudflare (domain and spam protection).
- Some providers may process data outside Turkey or the European Economic Area.
- We do not sell your data and do not share it for advertising.
5. Use of AI
To help prepare your quotation request, we use AI services to turn your shipment description and your replies into structured shipment details and to ask you follow-up questions. These services are provided through Lovable's AI platform and its model providers. We send them only the text of your request and your replies, not your email address or name. The result is available to our team, who can correct it. We do not make decisions with legal or similarly significant effects about you solely by automated means.
6. How long we keep your data
- Requests that are never linked to an account are deleted within 30 days.
- Account and request data are kept while your account is active and for 2 years afterwards for legal and accounting reasons, then deleted or anonymised.
- You can ask us to delete your data at any time (see section 7).
7. Your rights
Under the Turkish Personal Data Protection Law (KVKK) and, where it applies, the GDPR, you may ask us to:
- tell you whether we process your data and give you a copy,
- correct inaccurate data,
- delete your data,
- restrict or object to certain processing,
- withdraw your consent at any time (this does not affect past processing),
- receive your data in a portable format (GDPR).
Write to privacy@navloon.com from the email address registered with us. We will reply within 30 days. You may also complain to the Turkish Personal Data Protection Board (KVKK) or your local data protection authority.
8. Security
We protect your data with access controls, encrypted connections and restricted administrator access. No system is completely secure, but we work to keep your data safe.
9. Cookies and browser storage
We use only essential browser storage: to remember your language, to keep your unsent request, and to keep you logged in. We do not use advertising or tracking cookies.
10. Changes
We may update this notice. The version and date at the top show the current one. If changes are significant, we will inform you.
11. Contact
Navloon, privacy@navloon.com